Petr Charvát created TAP5-1934:
----------------------------------

             Summary: Kaptcha Component throws NPE after session is expired
                 Key: TAP5-1934
                 URL: https://issues.apache.org/jira/browse/TAP5-1934
             Project: Tapestry 5
          Issue Type: Bug
          Components: tapestry-kaptcha
    Affects Versions: 5.3.2
            Reporter: Petr Charvát
            Priority: Minor


A have a page with kaptchaField and Kaptcha image - OK.
The page is renered under URL e.g. http://localhost:8080/myapp/registration - 
OK.

But if the bad user (robot) hit url with  
http://localhost:8080/myapp/registration.kaptcha:image after the session is 
expired, NPE it thrown - NOK.

How to protect the page?

Caused by: org.apache.tapestry5.runtime.ComponentEventException [at 
context:Registration.tml, line 24]
        at 
org.apache.tapestry5.internal.structure.ComponentPageElementImpl.processEventTriggering(ComponentPageElementImpl.java:1130)
        at 
org.apache.tapestry5.internal.structure.ComponentPageElementImpl.access$3200(ComponentPageElementImpl.java:61)
        at 
org.apache.tapestry5.internal.structure.ComponentPageElementImpl$5.invoke(ComponentPageElementImpl.java:1051)
        at 
org.apache.tapestry5.internal.structure.ComponentPageElementImpl$5.invoke(ComponentPageElementImpl.java:1048)
        at 
org.apache.tapestry5.ioc.internal.OperationTrackerImpl.invoke(OperationTrackerImpl.java:74)
        ... 70 more
Caused by: java.lang.NullPointerException
        at 
com.google.code.kaptcha.text.impl.DefaultWordRenderer.renderWord(DefaultWordRenderer.java:55)
        at 
com.google.code.kaptcha.impl.DefaultKaptcha.createImage(DefaultKaptcha.java:43)
        at 

org.apache.tapestry5.kaptcha.internal.services.KaptchaProducerImpl.createImage(KaptchaProducerImpl.java:57)
        at $KaptchaProducer_b9452c5536c8e.createImage(Unknown Source)
        at 
org.apache.tapestry5.kaptcha.components.KaptchaImage.onImage(KaptchaImage.java:90)
        at 
org.apache.tapestry5.kaptcha.components.KaptchaImage.dispatchComponentEvent(KaptchaImage.java)
        at 
org.apache.tapestry5.internal.structure.ComponentPageElementImpl.dispatchEvent(ComponentPageElementImpl.java:923)
        at 
org.apache.tapestry5.internal.structure.ComponentPageElementImpl.processEventTriggering(ComponentPageElementImpl.java:1106)
        ... 74 more

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira


Reply via email to